Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: 4C7r8Qa3owiQAAMJRW9YAEH66pJh9+ycsGfI3N9DdSQ=
Subject key identifier: 54:52:C9:A6:DB:94:7B:C2:03:F3:64:82:4F:4F:89:2A:87:0D:C1:1E
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01A0C17B33545AAF5CD23300A41E8D1592A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 11AF
Signing time: Mon 21 Sep 2026 01:01:11 +0000
Manifest this update: Mon 21 Sep 2026 01:01:11 +0000
Manifest next update: Tue 22 Sep 2026 01:01:11 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: kaZ3kkRMTu4m+5pYZ6T15K1R0A+2Ycl0MZqm4WD1uvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:33:54:5a:af:5c:d2:33:00:a4:1e:8d:15:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Sep 21 01:01:11 2026 GMT
Not After : Sep 22 01:01:11 2026 GMT
Subject: CN=5452c9a6db947bc203f364824f4f892a870dc11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:e9:2b:26:46:9a:3d:9d:f2:e2:26:17:e2:
4c:7f:e4:1c:73:84:ba:ce:90:5e:11:3e:b1:89:50:
63:15:10:29:73:5c:a7:e1:db:52:e1:c3:aa:29:97:
a7:2a:bf:b5:9f:54:9a:2f:1d:f9:a5:43:6a:28:a8:
b5:1e:58:36:32:fd:16:95:09:88:2d:12:ff:38:fe:
22:8b:d3:34:29:22:80:0e:41:90:3d:3b:99:40:6d:
1c:7b:a0:ad:aa:4e:91:40:07:bd:f8:9a:e5:7d:b2:
cf:2c:e4:79:1f:38:53:36:eb:09:89:ba:02:de:a9:
97:ed:86:fa:d5:7f:44:f5:32:95:2e:7b:44:73:27:
47:77:89:16:f4:50:54:ac:99:ca:64:28:79:e8:c5:
40:58:96:2c:17:5c:6e:90:f5:de:57:95:10:35:4f:
ed:7c:03:47:e2:ab:8d:92:14:26:e1:54:d2:18:2c:
5c:38:38:41:f1:4b:7c:4f:47:ec:eb:38:c7:c1:ae:
e8:a4:37:4f:cc:a9:c4:22:5c:e6:27:41:1a:10:41:
3a:ee:58:40:a2:e1:24:d0:35:f8:21:b5:10:69:1e:
1c:7c:c4:b7:df:b5:2a:54:ae:8c:eb:1c:f3:33:cb:
dd:2b:f1:68:cc:11:de:09:c4:8c:d8:9e:c8:e8:4d:
2f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:C9:A6:DB:94:7B:C2:03:F3:64:82:4F:4F:89:2A:87:0D:C1:1E
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:56:10:83:04:07:e8:33:53:d0:8a:0c:61:09:7f:2f:12:fa:
db:7b:e7:b3:6a:13:be:98:dd:85:d4:f2:5d:25:08:19:96:cc:
8d:c2:f8:81:a1:9b:56:f6:cd:3b:68:6a:92:24:ea:7e:48:79:
10:f8:2c:99:8a:36:fa:42:a9:ca:62:22:25:fb:f0:7e:41:83:
84:58:5c:59:7b:b0:f9:c0:23:8c:b3:11:a5:77:d0:ec:43:a8:
4a:cf:b5:f8:46:ee:26:b4:be:48:71:88:6e:fd:0f:5b:dc:7d:
82:91:82:26:73:f1:31:bc:37:e4:b8:b0:4d:47:47:d4:62:19:
08:fe:22:0c:dd:e0:9f:6e:57:59:30:6e:b5:53:f8:77:fd:a6:
91:18:d1:79:2f:76:8d:30:47:42:29:c6:f5:12:0e:87:ab:6f:
13:81:5d:40:95:8c:3a:19:6e:c4:a7:25:b2:75:dd:26:6a:d5:
98:ef:d9:26:d9:14:2e:a2:83:62:9f:d4:c0:56:41:7b:8a:09:
11:4b:07:3b:94:f2:eb:6c:aa:96:47:3f:6c:76:15:c1:ca:5d:
d9:b4:d5:5d:d7:1d:12:19:24:b5:16:8a:09:b6:7f:29:0c:ee:
27:64:98:e5:96:f1:42:49:ee:08:d3:ac:5f:29:cb:e0:5e:03:
cd:7a:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:54 2026 by rpki-client